I would advise not todo that. Since most of the current traffic is web and HTTPS, with ssl-inspection disable and AV/IPS you will not detect any AV attacks since you can inspect the payload. Disabling ssl-inspection will hamper your security inspection and you risk exposure to these attacks. Just my 2ct opinion from a security analyst perspective